gf77 Casino – Privacy Policy

1. Who We Are

This Privacy Policy is issued by gf77 ("gf77," "we," "us," or "our"), the operator of the online casino and sports betting platform accessible at gf77.win. gf77 acts as the Personal Information Controller (PIC) for the personal data of players and website visitors processed through its Platform, as defined under the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations ("DPA IRR").

By registering an account or using any part of the gf77 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

gf77 collects the following categories of personal data, depending on how you interact with our Platform:

2.1 Identity and Registration Data. Full legal name, date of birth, nationality, gender, and a copy of your valid Philippine government-issued ID (e.g., PhilSys ID, passport, driver's license, UMID, SSS ID, Postal ID) collected during account registration and KYC verification.

2.2 Contact Data. Mobile number, email address, and residential address in the Philippines provided during registration or subsequent account updates.

2.3 Financial Data. GCash account details, Maya (PayMaya) account details, bank account numbers (BPI, BDO, Metrobank, or others), deposit and withdrawal transaction history, and account balance records. This data is collected to process your financial transactions and comply with Philippine AML obligations.

2.4 Gameplay and Behavioral Data. Records of games played, bets placed, wagers won and lost, session durations, game preferences, and betting patterns. This data is used to provide the gaming service, detect fraud, and personalize your experience.

2.5 Technical Data. IP address, device type and operating system, browser type and version, device identifiers, and access timestamps collected automatically when you visit gf77.win or use the Platform.

2.6 Communications Data. Records of your interactions with gf77 customer support, including live chat transcripts, email correspondence, and any feedback or complaints submitted.

3. How We Collect Your Data

gf77 collects personal data through the following means:

• Direct submission — data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team;
• Automated technologies — cookies, server logs, and similar tracking technologies that collect technical data when you visit or interact with the Platform;
• Payment processors — transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment providers when you complete a financial transaction;
• Third-party identity verification providers — data received when we use third-party services to verify your identity or screen against sanctions lists;
• Game providers — gameplay and session data received from our licensed game software providers whose titles appear in the gf77 lobby.

4. How and Why We Use Your Data

gf77 uses your personal data for the following purposes:

4.1 Account Management. To create, maintain, and manage your gf77 account, including processing your login credentials, account preferences, and profile information.

4.2 Service Delivery. To provide you with access to casino games, sports betting, bingo, and other features of the Platform; to process your deposits and withdrawals; and to credit winnings to your account.

4.3 Identity Verification and KYC Compliance. To verify your identity and age in compliance with PAGCOR requirements and Philippine anti-money laundering laws before processing withdrawals and for ongoing account monitoring.

4.4 Fraud Prevention and Security. To detect and prevent fraudulent activity, money laundering, unauthorized account access, and other harmful or illegal conduct on the Platform, including by monitoring gameplay patterns and financial transactions.

4.5 Legal Compliance. To comply with our obligations under Philippine law, including the Data Privacy Act, the Anti-Money Laundering Act (RA 9160, as amended), PAGCOR regulatory requirements, and any applicable court orders or government directives.

4.6 Customer Support. To respond to your inquiries, resolve disputes, process complaints, and communicate important account information to you.

4.7 Responsible Gaming. To monitor gameplay behavior for signs of problem gambling, to enforce responsible gaming limits you have set on your account, and to administer self-exclusion requests.

4.8 Platform Improvement. To analyze usage patterns, test new features, and improve the performance, security, and user experience of the gf77 Platform.

4.9 Marketing Communications. To send you promotional offers, bonus notifications, and newsletters where you have provided consent to receive such communications. You may withdraw your marketing consent at any time by updating your account preferences.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, gf77 processes your personal data on the following legal bases:

• Performance of a contract — processing necessary to fulfill the Terms and Conditions you agreed to upon registration;
• Legal obligation — processing required for compliance with Philippine laws, including AML, KYC, and PAGCOR regulations;
• Legitimate interests — fraud prevention, security monitoring, and Platform improvement, balanced against your rights and interests;
• Consent — for marketing communications and the use of non-essential cookies, where we have obtained your explicit consent.

6. Sharing Your Personal Data

gf77 does not sell, rent, or trade your personal data to third-party advertisers. We share your data only in the following circumstances and strictly on a need-to-know basis:

6.1 Payment Processors. GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently compliant with Philippine financial regulations.

6.2 Game Providers. Licensed game software providers whose titles appear in the gf77 lobby receive session identifiers and bet data necessary to operate the games. They do not receive your full identity or financial data.

6.3 Identity Verification Services. Third-party KYC and identity verification providers receive your identity documents and biometric data solely for the purpose of verifying your identity and age. These providers are bound by data processing agreements with equivalent data protection obligations.

6.4 Regulatory and Law Enforcement Authorities. gf77 may disclose your data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Philippine National Police, or other competent authorities where required by law, regulation, or court order, or where disclosure is necessary to investigate suspected fraud or criminal activity.

6.5 Corporate Transactions. In the event of a merger, acquisition, or sale of all or substantially all of gf77's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7. International Data Transfers

Some of gf77's service providers and game providers may be located outside the Philippines. Where your personal data is transferred internationally, gf77 ensures that appropriate safeguards are in place, consistent with the requirements of the Philippine Data Privacy Act. These safeguards include contractual data processing agreements that impose data protection obligations equivalent to those required under Philippine law. gf77 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

8. Data Retention

gf77 retains your personal data for the following periods:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with Philippine AML record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing preferences and consent records: Retained until you withdraw consent or close your account, plus one (1) year thereafter as proof of consent.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymized in accordance with our data destruction procedures.

9. Your Rights Under the Philippine Data Privacy Act

As a data subject under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by gf77:

• Right to be Informed — to be informed of how your data is collected and processed, as described in this Policy;
• Right to Access — to obtain a copy of the personal data gf77 holds about you;
• Right to Rectification — to request correction of inaccurate or incomplete personal data;
• Right to Erasure / Right to be Forgotten — to request deletion of your personal data, subject to our legal retention obligations;
• Right to Data Portability — to receive your personal data in a structured, commonly used format;
• Right to Object — to object to processing based on legitimate interests, including direct marketing;
• Right to File a Complaint — to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact our Data Protection Officer at the details provided in Section 14. We will respond to verified requests within fifteen (15) days of receipt.

10. Cookies and Tracking Technologies

gf77 uses cookies and similar tracking technologies on our Platform for the following purposes:

Essential cookies are strictly necessary for the Platform to function, including maintaining your login session and securing your account. These cannot be disabled without disrupting your use of the Platform.

Analytics cookies help us understand how players interact with the Platform, which pages are most popular, and where technical issues arise. This data is processed in aggregated, anonymized form.

Preference cookies remember your language settings, display preferences, and other customizations to improve your experience.

You may manage your cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to access or use the core Platform features.

11. Security Measures

gf77 implements technical and organizational security measures designed to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive stored data including KYC documents and financial records;
• Access controls restricting personnel access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of our systems;
• Two-factor authentication available to all registered players for account access.

While gf77 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are also responsible for maintaining the security of your account credentials.

12. Children and Minors

The gf77 Platform is strictly for persons aged 21 years and above, consistent with the minimum gambling age established by PAGCOR. gf77 does not knowingly collect personal data from persons under the age of 21. If we become aware that an account has been registered by or on behalf of a person under 21, we will close the account immediately and delete all associated personal data, returning any deposited funds to the originating payment method. If you believe a minor has created a gf77 account, please contact us immediately at the details in Section 14.

13. Updates to This Privacy Policy

gf77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email and/or a prominent notice on the Platform at least seven (7) days before the changes take effect. The "Last updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

14. Contact and Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or the exercise of your data subject rights, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe your data privacy rights have been violated. The NPC can be reached through the official NPC website.